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ABSTRACT 



A secure keyboard input terminal is disclosed in which 
a secret user identification code number or other confi- 
dential data sequence formed from a set of alpha- 
numeric characters (for example, the ten numerical 



digits 0 through 9) may be input secretly by a user, the 
terminal itself comprising (a) a plurality of input keys (in 
the case of one illustrated apparatus, 10 separate keys), 
(b) a corresponding plursiity of character displays 
adapted for displaying said characters and (c) electronic 
circuitry for (1) apparently randomly associating se- 
lected ones of said character set to respective individual 
keys, (2) displaying to the user the character thus associ- 
ated with each key and (3) translating a signal represent- 
ing the actuation of a particular key by the user into a 
signal representing the particular character then associ- 
ated wiUi that key. In one illustrated embodiment the 
indjyidu^^ysarejjuttons.^ 

^^surrounding a.trans^ent centrd bore through w^ch,a 
seven^segment^numerical display^Haracter ^iay-^be 

^iewei^but only^_ape^soI^located^^ 
ICeyboardiJnone alternative embodiment, the^individ- 
ual key areas haveacentralbore portiblTandpush but- 
ton key adjacent to the central bore portion and in other 
embodiments visual security is maintained by the use of 
a set of transparent plates with opaque coatings or thin 
plates between the adjacent plates. One embodiment 
reassociates the displayed digits prior to the input of a 
data sequence in response to the manual actuation of a 
START key and retains the same scrambled association 
of digits to keys during the successive actuation of keys 

thus associated-with the-data^seq uencej o jhe input . 

Other^embodimente 

£mautcimatic^dom.(or,apparently_ra — ^ 
tion^betweenj^ display¥d~digits (or other^chara^ 
and the individual keysTatTanyJime during the inputting, 
^f a data sequence^or^aut omati cally_reassociate chaiic^ 
ters and ke^^^luiraeanjndividual data character (or^ 
predetemiined nimiber of cHaracters) is input. Different 
types of random or apparently random sequence gener- 
ating techniques may be employed. A host system pro- 
cesses the output code and accomplishes the desired 
function following validation. 

10 Claims, 12 Drawing Figures 
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find utility in certain applications involving a limited 
SECURE INPUT SYSTEM number of sophisticated, highly trained users, it would 

not appear to be adaptable for use by the general public 
RELATED APPLICATIONS on an everyday basis. 

This patent application is a continuation-in-part of ' Also, in U.S: Pat; No. 3,893,073, in FIG. i, louvers 
U.S. patent application Ser. No. 146,404, filed May 5, were disclosed located in front of a single large numeri- 
1980 now U.S. Pat. No. 4,333,090. cal display. Howeyer, only two or three louvers were 

FTP! n OF THP IMVPNTTTON located over the actual numerical display, and this 

FIELDOF THElNVtNllOlN would be ineffective to significantly reduce the viewing 

The present invention relates generally to data input angle. ' 
devices and more particularly to such devices wherein 

data may be input by means of manually actuated keys.: : OBJECTS OF THE DISCLOSED EMBODIMENT 

BACKGROUND OF THE INVENTION Accoifdingly, one objective of the present invention 

as exemplified by the embodiments disclosed herein is to 
A. The Prior Art provide a data entry without fear of the data being 

■ . The art is replete with, various types of data entry compromised in the presence of a bystander, 
devices wherein digital data in the form of electronic Another objective is to provide a secure data entry 
signals may be manually generated by the actuation of keyboard wherein a uscr may-input data,-One jcharacte r 
various types of data input keyboards including such ^^_at^time,-merely:by:acti\^^ 

keyboards employing thumb wheels, dials, a plurality of tfieTidentified as bang assbciateiiwith corresppiTd- 
toggle switches, latching type key switches arranged in Ajng^haracters to be input, the a pp^itus being provided ; 

: groups; and interlocked such that: only one keys witch Vv^^th ,neans tofeassociate the characterewith thekeys 
within a group may be activated at any one time, and £in-a-random-(or~apparently.- random) fashion and-to 
arrays of momentary actuation pushbuttons in which present to the u^thTresults-of sucfiT^^iation in a 

: the sequence that the individual buttons are actuated is .^conyenigntTonn^whjle data is being input. 
also significant. , ' . . Yet anoth^ePrelated objective is to provide app 

Typically, . such keyboards have xharacter indicia scrambling a set of d5riHpntTcharacters-:Whh re- 

permanently associated with each of the key positions to^the; dataMnput'keyi^f an Jnput terminal,>r 

mdicatmg the value of or meamng associated with the 30 dfei^g:the:respective^ch^^ 
actuation of that particular key. *c-*- ^ * j 1 u *i- * 1 *i. 

Accordingly, a bystander in the vicinity of such a th^e^^ectiye asso^^^ only the user 

prior art keyboard upon witnessing which keys were ofthejermm^^ associ^^ 
actuated{andifsignificantin whatsequence)couldthen 2^!°^ (and^hu^ a bystander observmg >yhat keys^were 
examine the keyboard itself to . determine the actual ; acti^ed^ what sequence sfe^ould not be able to 
value of the data that the user had just input, and the 35 determme what-chara_ctersjiadjbee^ 
security of the data would thereby be compromised. ■.. ■ . generating-in response to-each-key actuation^^ 

If the user was inputting secret or confidential infor- ; representing the-then-associatedxharacter. 
mation (such as a secret identification code known only Other objectives, including those of a more specific 
to himself used to establish his identity to an electronic nature, will become apparent upon a reading of the 
bank teller or other electronic device), then a possible ^ following Detailed Description and the Drawings ap- 
security expedient would be to shield the keyboard with pended thereto, 
a privacy screen such that the fmgers of the user operat- 

ing the keyboard were hidden from view. However, if ^^^^^ ^UMMAKY 

such a privacy shield were to be effective^ it would also Briefly, the foregoing and other related objectives (as 
at least partially obscure the view of the user himself of ^^jj become more clear hereinafter) may be achieved in 
the indicia associated with the various keys and could a presently preferred embodiment of a secure keyboard 
thus result in erroneous data being entered and/or the input terminal in which a secret user identification code 
user being seriously inconvenienced. Such a shield number or other confidential data sequence formed 
would also add bulk and weight to the keyboard that fromasetof alpha-numeric characters (for example, the 
would be undesirable in a self-contained portable appli- 50 numerical digits 0 through 9) may be input secretly 
cation such as an electronic credit card verification by a user, the terminal itself comprising (a) a plurality of 
system. m^uX key buttons (in the case of one illustrated appara- 

Such limitations of the pnor art were m part ad- 10 separate buttons) (b) a corresponding plurality of 

dressed in U.S. Pat. No. 3.587 051 which discloses a -^^^^.^^^ character displays adapted for displaying 
device wherein the user responds to the rand^^^ 55 .^^.^.^^^ ^^^^ ^^.^ characters, and (c) electronic 

nation of combinations of lights, each 01 the dill erent . - ..^ ^, . , . ... 

lights being permanently mafked with a different digit. — ^ for (1 apparently randomly associatmg se- 
The user would take each random pattern of illumi- l^cted ones of said character set to respectjve .mdividual 
nated and non-illuminated lights to generate mentally a ^eys, (2) displaying the assigned character associated 
data encoding key which he then would mentally apply 60 with each key to the user and (3) translatmg a signal 
to his secret combination to generate a derived code resulting from the actuation of a particular key mto a 
which he then would input to the device by actuating signal representing the particular character then associ- 
the appropriate switch or switches. Upon his success- a^^d with the key. 

fully repeating such an encoding process for a predeter- In one embodiment, the individual key buttons are 
mined number of different randomly generated pat- 65 provided with opaque walls surrounding a transparent 
terns, the apparatus would be able to determine whether central bore through which a seven segment numerical 
or not the user was in possession of the correct secret display character may be viewed, but only by a person 
combination. Although such a prior art system might located directly above the keyboard, thereby ftirther 
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enhancing the security and privacy afforded by the further differs from the embodiment of FIG. I in ;];i:r 
terminal, the push button key is located next to rather than above 

In an alternative embodiment which is also illustrated the character display; 
the keyboard comprises individual key areas defined FIG. 2 is an exploded assembly view showing how 
within a transparent cover plate, each of the key areas 5 the individual key buttons, the seven segment numerical 
being provided with a transparent central bore defined displays and the matrix type switch assemblies utilized 
by opaque walls through which a seven segment numer- in the terminal of FIG. 1 may be assembled with respect 
ical display character located below the cover plate to one another; 

may be viewed and with an adjoining push button oper- FIG. 3 illustrates in cross section the components of 
atively connected to an electric contact. 10 FIG. 2 in their assembled relationship to one another, 

In another embodiment, which is presently preferred, and to the eye of the user; 
the digits of a light emitting diode or a liquid crystal FIG. 4 is a method flow chart illustrating a presently 
display are provided with a set of transparent plastic (or preferred embodiment of the method aspects of the 
glass) plates having opaque coatings or opaque shims present invention; 

between the plates, and with the display arranged for 15 FIG. 5 depicts various electronic circuits employed 
viewing through the edges of the plates. in apparatus of the type illustrated in FIG. 1 and the 

Although the illustrated and described presently pre- manner they may be connected to one another; 
ferred embodiment associates the digits 0 through 9 FIG. 6 shows an exemplary type of Random Se- 
with ten data keys of the terminal, such that each digit quence Generator usable in the arrangement illustrated 
is assigned to one and only one key, the invention would 20 in FIG. 5 shown together with the Modulo 10 Counter 
also have utility if the same digit might be assigned to of FIG. 5 and the control signals that effect the concur- 
niore than one key at a time or if not all members of the rent operation of said generator with said counter; 
character set were always associated with at least one FIG. 6 A shows an alternative exemplary type of 
key. Moreover, although the depicted embodiment Random Sequence Generator; 

reassociates the displayed digits prior to the input of a 25 FIGS, 7 and 9 show the preferred visually secure 
data sequence in response to the manual actuation of a input keyboard configurations; 
start key and retains the same scrambled association of FIG, 8 is an end view of one plate which may be 
digits to keys during the successive actuation of keys included in the optical grids of FIGS. 7 and 9; and 
thus associated with the data sequence being input, in FIG. 10 is a block circuit diagram illustrating system 
certain types of applications in which the security of the 30 utilization involving the principles of the invention, 
input data overrides any consideration of user conve- dftaii FH nFsruiPTinv of thf 

nience, then in accordance with other embodiments it or AWT 

might be preferable to perinit the user to manually initi- DRAWINGS 
ate the automatic random reassociation between the Referring now with particularity to FIG. 1, it may be 
displayed digits (or other characters) and the individual 35 seen that in one embodiment of the present invention, 
keys at any time during the inputting of a data sequence there is provided a secure data input keyboard terminal 
by means of a separate rescramble key, or even to cause designated generally by the reference numeral 10 hav- 
the displayed characters to become automatically re- ing ten data pushbuttons designated respectively by 
scrambled each time an individual data character (or reference numerals 12, 14, 16 . . . 30, with the first, 
predetermined number of characters) is entered. 40 second and third keys (12, 14, and 16) being arranged in 

Furthermore, although a disclosed exemplary pre- a first row; the fourth, fifth, and sixth keys (respectively 
ferred embodiment associates the digits 0 through 9 designated by reference numerals 18, 20, and 22) being 
with ten keys of the keyboard utilizing simplified types arranged in a second row; seventh, eighth, and ninth 
of random sequence generator digital circuits which keys (designated respectively by reference numerals 24, 
generate only a limited number of the 3,628,800 possible 45 26, and 28) located in a third row; while the tenth key 
permutations of ten different characters or key posi- (designated by the reference numeral 30) is by itself in a 
tions, the invention would also find application in which fourth row. Terminal 10 is also provided with a start 
different types of random or apparently generating key 32, the function of which will be more clear herein- 
techniques were employed. after, and with an on-off switch 33. 

The present system also contemplates implementa- 50 Referring again with particularity to the apparatus 
tion by microprocessor system configurations; and asso- illustrated in FIG. 1, it may be seen that as depicted, 
elation with a host circuit which compares or validates first pushbutton 12 is presently displaying the numeral 
the input digital information and actuates a control "0" to the user, second key 14 is displaying the numeral 
circuit and device in response to the receipt of appropri- "9", third key 16 is displaying the numeral **1", fourth 
ate input information, 55 key 18 is disolaying the numeral "7", fifth key 20 is 

IFF nF«;rp IPTTONT OF Yhf np AWTNrxt! displaying the numeral "6", sixth key 22 is displaying 

BRIEF DESCRIPTION OF THE DRAWINGS numeral "8", seventh key 24 is displaying the nu- 

For a better understanding of the present invention as mcral **4'*, eighth key 26 is displaying the numeral "3", 

exemplified in presently preferred and alternative em- ninth key 28 is displaying the numeral *'5", and tenth 30 
bodiment thereof, is made to the following Detailed 60 is displaying the numeral "2". 

Description and the appended -Drawings in which: Also visible in FIG. 1 in faint dashed outline below 

FIG. 1 illustrates in plan, view a secure keyboard the top surface of each of the ten keys 12, 14, etc. are the 

input terminal in which the digits 0 through 9 have been non-illuminated segments of a conventional 7-segment 
apparently randomly assigned to the respective keys of light-emitting diode display which when illuminated in 
a 10 key keyboard prior to the input of data; 65 various other combinations, may be used to display 

FIG. lA illustrates an alternative embodiment to that other digits or even non-numerical alpha characters, 

illustrated in FIG. 1 in which a different apparently Since when the terminal is in use, the segmented 

random assignment of digits to keys is visible and which display associated with each of the ten keys presents a 
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different digit character each time the START key 32 is casual bystander cannot readily perceive the individual 
depressed and since the individual data keys 12, 14, etc. characters then being displayed and thereby, merely by 
are utilized not only to display characters associated watching which buttons are being depressed in what 
therewith, but also to manually input data seqences, in sequence, knowing the secret data sequence being input 
the illustrated embodiment the mdividual pushbuttons 5 by the user. 

are at least pardally transparent and are mountdd above As a further aid to security, the device displays a 
minature light emitting 7-segment light emitting diode newly generated sequence of associated key characters 
character displays located on an upper surface of a first only after the user has pressed START button 32, and, 
circuit board, and have an extension extending through as soon as the user has completed inputting his data, the 
said upper circuit board to an operative position relative 10 characters are no longer displayed, 
to a snap action contact switch preferably mounted to a One presently contemplated application for such a 
second circuit board therebelow, as will become more secure data input keyboard terminal is in a Credit Card 
clear hereinafter with particular reference to FIGS. 2 Verification System; however, it should be observed 
and 3. that the present application is directed to a type of data 

Although the embodiment of the invention illustrated 15 input terminal which will doubtless find utility in other 
in FIG. 1 employs transparent or at least partially trans- applications in which it is desired to manually input data 
parent key buttons through which the individual seg- by means of a keyboard without compromising the 
mented displays, each mounted directly below its re- data's security even in the presence of casual observers, 
spective button, may be viewed, those skilled in the As examples of such other possible applications, I 
design and construction of digital data terminals will 20 would mention automated or semi-automated bank tell- 
doubtless give consideration to other techniques for ers connected to a bank's central computer, electronic 
physically associating a particular character display reprogrammable locks such as may be employed in 
with a particular pushbutton, such as mounting the hotels and apartments, electronic combination locks 
display to one side of its respective button, or by mount- operating the doors to bank vaults or other secure re- 
ing the ten displays at a location somewhat spatial ar- 25 stricted access areas, or the like— this list is by no means 
rangement of four rows and three columns (so it will be exhaustive. Depending upon the particular application, 
readily apparent to the user which display corresponds it may be desired to depart from the configuration of the 
to which pushbutton), or by labeling the individual keys terminal illustrated in FIG. 1 by providing more or 
and employing corresponding labels on the ten individ- fewer keys, and/or by employing character sets con- 
ual character displays. 30 taining a greater or lesser number of alpha-numeric 

Furthermore, although a conventional ten key input character than the ten digit illustrated in the Figure, 
keyboard arrangement is illustrated in which the ten Referring now to FIGS. 2 and 3, which as noted 
digits are arranged in three rows each of three digits and previously are respectively an exploded assembly view 
a fourth row of only one digit, it would obviously be and a cross-section view of a button, display, and switch 
possible to arrange the ten pushbuttons all in a single 35 utilized in the FIG. 1 apparatus, it may be seen that the 
row, in which case the ten associated character displays terminars keyboard may be conveniently integrated 
may also function as a ten digit output display. with conventional segmented displays by means of at 

At this point, it should also be observed that although least partially transparent pushbuttons 34 each provided 
not apparent from the view of the apparatus shown in with a transparent cover plate 35 (preferably of the 
FIG. 1 (but indicated diagramatically in FIGS. 2 & 3, 40 same color as the light emitted by the light emitting 
the individual character display is preferably provided diodes forming the segments of individual characters so 
with a collimating light shield formed by the opaque that the only thing visible through the cover plate are 
walls of the associated key button such that the dis- the illuminated segments forming the displayed charac- 
played character may be seen only when the viewer's ter). Cover plate 35 covers the upper end of a central 
eye is located within a narrow range of angle with 45 bore 36 (which could assume the form of an actual 
respect to the display and thus the characters displayed opening machined or molded along the central or verti- 
may be seen by only one individual at a time. This has cal axis of the opaque plastic material forming the body 
the advantageous effect of furthering the security of the of pushbutton 34, or which alternatively may be formed 
data input by the user, since even if another individual of a solid transparent material set within said opaque 
were in the immediate area, even if he observed which 50 material). 

key is then being depressed by the user, he would be Below the array of individual pushbuttons 34 there is 
unable to determine what data was being input by the provided an upper circuit board 37 having a plurality of 
user, since he would not know what character , was 7-segment displays 38 mounted to an upper surface 40 
being displayed as the character then associated with a thereof, and lower printed circuit board 42 having 
particular key. 55 mounted on its upper surface 44 a plurality of sealed 

Those familiar with the construction of conventional snap-action type contacts arranged in a row and column 
input and output data terminals who are otherwise matrix, the exterior of one of which being shown in the 
skilled in the art will also be familiar with other struc- figures at reference numeral 46, with its first (row) 
tures that would have the effect of restricting the view- terminal 47 and second (column) terminal 48. 
ing angle from which the displayed characters may be 60 Each pushbutton 34 is provided with a downwardly 
clearly viewed, such as molded magnifying lenses protruding leg 49 at one lower edge thereof. Leg 49 
placed above the displays. Depending upon the degree passes through an opening 52 provided in upper circuit 
of security required, and the characteristics of such board 36 and operatively engages the associated snap- 
other structure, they may be substituted for, or serve as action switch contact 46. The portion of button 34 im- 
an adjunct to, the collimating light shield discussed in 65 mediately above and below a collar 54 co-acts with 
detail herein. In any event, it is clearly desirable to corresponding openings of upper and lower key guide 
design the physical characteristics of the mounting of plates 56a and' 56^ (see FIG. 3) to locate each individual 
the terminal's keyboard character displays such that a key 34 with respect to its corresponding 7-segment 
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display 38 and snap-action switch 46. Collar 54 itself 
serves to limit the vertical travel of the key button. 
Advantageously, contact 46 may have sufficient spring 
action to return key button 34 to its uppermost position 
(collar 54 touching upper guide plate 56flf) when the key 
is no longer depressed. Alternatively, a second leg (not 
shown in the drawings) could co-act with a separate 
return spring to effect the upward return movement of 
button 34. 

Referring to FIG. lA, which is noted above, illus- 
trates embodiment of a secure input keyboard alterna- 
tive to that illustrated in FIG. 1, it may be seen that in 
overall appearance there is a strong similarity between 
these two embodiments. Accordingly, in the case of 
corresponding or related elements in both figures, the 
corresponding structure in the alternative embodiment 
has been designated with the same reference numeral, 
but differentiated by means of a prime symbol (')• 

In particular it may be seen that there is provided an 
input terminal designated generally by the reference 
numeral 10', having ten individual key areas designated 
respectively by the reference numerals 12', 14', 16', 18', 
20', 22', 24', 26', 28', and 30'. 

Furthermore, the alternative keyboard 10' is pro- 
vided with a start button 32', which provides a function 
similar to the start button 32 of the FIG. 1 presently 
preferred embodiment. 

As illustrated in the Figure, the digit **5" is presently 
associated with first key 12'. The second and third keys 
of the first row show respectively the digits "4" and 
"3", The remaining rows and columns as displayed are 
presently associated with the digits **2*', "1", "0'\ "9", 
"8", "7" and "6". 

It will be recalled that in the case of the embodiment 
of the FIG. 1, the keyboard terminal is provided with 35 
separate relatively large push buttons, each of the push 
buttons having integral therewith a collimating light 
shield for providing further privacy to the user while he 
is inputting secret data. In the case of the FIG. lA 
embodiment, the same collimating light shields are re- 40 
tained, but are no longer physically part of a movable 
push button assembly, but rather are formed by the 
opaque lower portion of keyboard cover plate 11, the 
upper portion of said cover plate being transparent in 
the same manner as the individual push button cover 45 
plates 35 of the FIG. 1 embodiment. 

Instead of relatively large movable push buttons, 
cover plate 11 is provided with ten key areas each de- 
fined by a suitable technique (such as silk screen print- 
ing, an engraved area on the upper surface or the use of 50 
different color plastics integrally molded as one unit) so 
that the digit display portion of the key area formed by 
the collimating light shield (one of which is being 
shown in broken outline at reference numeral 36') is in 
the upper portion of the key area and a relatively small 55 
push button 13 is located at a lower portion of the same 
key area. In this manner there results a form of key- 
board which is less prone to jamming and smearing 
problems caused when the keyboard is used in a dirty 
location with possibly greasy fingers. Similarly, key 60 
areas 14' through 30' are provided with respective push 
buttons 15 through 31. 

As may be clearly seen from FIG, 3, when the eye of 
the user (indicated diagramatically in the Fig. at refer- 
ence numeral 60) is directly above the keyboard such 65 
that his line of sight 62 is parallel with the principal axis 
of push button bore 36, and approximately perpendicu- 
lar to upper keyboard guideplate S6a, then the light 
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from the individual light emitting diodes forming char- 
acter display 38 is able to travel unimpeded through 
central bore 36 and upper plate 35 to the viewer's eye 60 
along line of sight 62. If, however, the viewer's line of 
5 sight is somewhat displaced from that just described 
(indicated diagramatically by the dotted viewer's eye 
shown at reference numeral 64 and line of sight 66), the 
light emitted by character display 38 in the direction of 
a thus displaced viewer 64 (the path of such light being 
10 shown diagramatically at reference nunieral 68) is 
blocked by the opaque sidewalls of keybutton 34 and 
accordingly all the viewer sees is a dark void, even 
when some or all of the LED segments forming a par- 
ticular displayed character are illuminated. 
15 The identical light collimating/light blocking func- 
tion results from the alternative embodiment shown in 
FIG. lA, and will accordingly not be described in fur- 
ther detail herein. 
Referring now to the flow chart of FIG. 4, it will be 
20 clearly seen that in accordance with its intended 
method of operation, the apparatus of FIG. 1 initially 
awaits an indication from the user of his desire to input 
data signified by the pressing of START button 32, this 
first step being indicated diagramatically in FIG. 4 by 
25 block 101. 

After the START button has been depressed, the 
electronics contained within the terminal automatically 
generates a coding scheme in the form of an apparently 
random sequence of key locations, a function indicated 
30 diagramatically in FIG. 4 by block 103. 

As the third step of the method, the electronic cir- 
cuitry of the apparatus then causes the individual char- 
acter displays to display the characters in association 
with particular keys of the keyboard in that same appar- 
ently random sequence, and enables the circuitry's data 
logic such that the user may then input his secret string 
of data, a function indicated diagramatically in the FIG. 
4 by block 105. 

As noted previously, preferably the display of the 
characters in the randomized sequence is accomplished 
in such a manner that bystanders are unable to observe 
which character is associated with which key, so that 
even if a bystander observes which fingers of the user 
pushed which keys, he still does not know what data 
was being input by the user. 

The data entry logic having been enabled, the user 
may now enter his secret string of data by depressing 
the various keys associated with the string's characters 
and the terminal automatically translates the input sig- 
nals originating from the key contacts into a decoded 
data string by utilizing the same apparently random 
sequence, a function indicated diagramatically in FIG. 4 
by block 107. 

Finally, once the user has completed entry of his 
secret data, the terminal then automatically erases the 
displayed characters and disables the data entry logic, 
thereby maintaining the integrity and secrecy of the 
input data string, a function indicated diagramatically 
by block 109. 

Alternatively, the user could manually input a signal 
by means of a manual RESCRAMBLE switch (which 
could be on/off switch 33 or START button 32) or the 
system could automatically generate a Rescramble sig- 
nal once a predetermined number of data characters 
have been entered or a predetermined time period has 
elapsed, which would start the commencement of a new 
operational cycle in which a new (but again apparently 
random) sequence of key locations is generated and 
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replaces the old sequence, a function indicated in FIG. of the three columns). Obviously, the duration of Initial- 

4 diagramatically by block 111 (which is shown in ization signal B as measured by the clock signal CLK 

dashed lines to indicate its alternative nature). must be sufficient to guarantee that at least one full 

Refernng now generally to FIG. 5, it may be. seen cycle of 10 different digits will have been loaded into 

that the electronic circuitry of the present invention 5 the ten different addresses corresponding to the ten 

mcludes separate circuits for performing the following different actual keys in the keyboard; however, since 

major functions: the output of Modulo 10 Counter 200 and of Random 

a Modulo 10 Counter (mdicated by block 200) Sequence Generator circuit 202 is cyclic in nature and 

a Random Sequence Generator (indicated by block maintained in synchronization with each other by 

2^2) 10 means of a common clock signal CLK (and if required 

a Display Driver (indicated by block 204) a Count Disable signal CE) the fact that Initialization 

a first Random Access Memory (indicated by block signal B might in fact have a duration not equal to ex- 

acdy one such full cycle (or even to an integral multiple 

a second Random Access Memory (indicated by of one such cycle) is of no moment. 

block 208) 15 In accordance with the exemplary embodiment of the 

a Keyboard Contacts Decoder (indicated by block Random Sequence Generator circuit 202 shown in 

more detail in FIG. 6, the Random Sequence Generator 
a Data Counter (mdicated by block 212). circuit is designed suchjhat it automatically generates a 
Additionally, the electronics includes the following Count Disable signal CE whenever the Generator is 
components for generating timing and control signals: 20 generating a combination of row and column designa- 
a one-shot pulse generator 214 tions not corresponding to any terminal key location 
a Flip-flop 216 actually in use; thus, assuming that the first row is desig- 
a comparator 218, and nated by the binary number "00", the second row by the 
AND-gate 220. binary number "01", the third row by the binary num- 
START button 32 (see also FIG. 1) generates a 25 ber "10" and the fourth row by the binary number "II"; 
Scramble signal "A", the length of which is more or less the first column by the binary number "00", the second 
random, being determined by how long the START column by the binary number "01", the third column by 
button is held down by the user. Scramble signal A is the binary number "10"; since there is but one key in the 
utilized as the Reset input to Random Sequence Gener- fourth row, its designation will be "1100" and binary 
ator 202 to generate a different apparently random se- 30 numbers "1101" and "1110" represent non-existent keys 
quence of 4-bit addresses each time the START button in the second column of the fourth row and in the third 
is depressed. START button 32 also generates a Clear column of the fourth row respectively, and Counter 200 
signal CLR which serves as the Reset input to Data does not increment when those latter two (non-existent) 
Counter 212. It may be noted that although in certain locations are output by the Random Sequence Genera- 
applications Scramble signal A and Clear signal CLR 35 tor. Alternatively, the random sequence generator 202 
may be one and the same, in other alternate preferred could be designed such that it automatically bypasses 
embodunents (e.g., if the characters displayed in associ- row and column designations not corresponding to any 
ation with the various key buttons are rescrambled in actual terminal key, in which case the Count Disable 
the middle of a data sequence) it is convenient to have signal CE would not be required. In any event, in order 
two separate and distinct signals. 40 that the particular sequence of digits illustrated in FIG. 

Preferably, START button 32 generates manual 1 be associated with the particular keys of the keyboard 
Scramble signal A by means of a conventional contact as shown therein, then, at the same time the Modulo 10 
debounce circuit (for instance a pair of cross coupled Counter 200 outputs a binary number corresponding to 
NAND-gates), so that spurious control signals are obvi- the decimal digit "1", which as illustrated in FIG. 1 is 
^t^' 45 associated with the key in the third column of the first 
Scramble signal A is also utilized by one-shot circuit row, the corresponding output of the Random Se- 
214 to generate an Initialization signal "B" once quence Generator will be "0010": The decimal number 
START button 32 has been depressed and released. "2" is associated with the fourth row at the first column, 
Initialization signal B is employed by first data gate 222 accordingly the second number generated in sequence 
controlling data through output bus 226 from Modulo- 50 by Generator circuit 202 will be "1 100", the third num- 
10 Counter 200 leadmg to I/O port 228 of first RAM ber will be "1001", the fourth will be "1000", the fifth 
206; this signal also controls second data gate 224 lo- "1010", the sixth •*0101", the seventh "0100", the eighth 
cated between the output 230 of Random Sequence "0110", the ninth "0001", the tenth (the 0 character) 
Generator 202 and the Address input port 232 of first "0000", whereupon the sequence will again repeat itself. 
RAM 206. 55 At this point, it will be noted that although the ten 
When these two gate are enabled by Intialization characters are output in their normal arithmetic se- 
signal B and signal B is also applied to the Write Enable quence by Modulo 10 Counter 200, and the ten associ- 
input 234 (pulsed by ANDing with CLK to ensure a ated locations of actual keyboard keys are output in 
proper write operation) of first RAM 206, then the varying random sequences by Random Sequence Gen- 
binary equivalents of digits 0 through 9 cyclicly output 60 erator 202, it would also be possible to generate the 
by Modulo 10 Counter 200 will be loaded sequentially address signals corresponding to locations on the key- 
into the RAM in accordance with the apparently ran- board always in the same sequence, and to generate the 
dom sequence of addresses output by . Random Se- data signals applied to I/O port 228 in varying random 
quence Generator circuit 202 (which it may be noted sequences. Either way, the addresses in first RAM 206 
outputs a four digit address, the first two digits of which 65 corresponding to the ten active data keys of input termi- 
designate particular one of the four rows associated nal 10 would be loaded with the binary representations 
with the ten key arrangement illustrated in FIG. 1 and of the respective associated decimal digits in an appar- 
the second two digits of which specify a particular one ently random sequence. 
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Conversely, it would also be theoretically possible for 
first RAM 206 to be sequentially loaded with data des- 
ignating associated key locations, with the address itself 
within the random access memory corresponding not to 
a particular key location, but rather to a particular char- 
acter. However, such an arrangement would needlessly 
complicate the unscrambling of data input by the key- 
board and detected by Keyboard Contacts Decoder 210 
as will become more evident hereinafter, and is accord- 
ingly not presently preferred. 

I would mention that in certain applications in which 
it is foreseeable that Modulo 10 Counter 200 might lose 
synchronization with Random Sequence Generator 202 
(even though they are both driven by the same clock 
CLK signal 236), it may be preferable to have the value 
input via terminal IN2 of Display Driver Circuit 204 be 
provided not directly by the Modulo 10 Counter itself 
but rather from I/O output 228 of first RAM 206. In 
that event, it might be necessary to modify somewhat 



10 



15 



flop 216 will be low, and accordingly the output from 
AND-gate 220 will be low. 

Data Enable signal C is applied to ON input 242 of 
Display Driver circuit 204 and accordingly the Display 
Driver circuit supplies the ten character displays of 
terminal 10 with signals for illuminating (in time multi- 
plexed fashion) the appropriate segments of the various 
light emitting diodes. The output of the Display Driver 
circuit is a signal on one of the 10 digit lines from second 
Output Port 246 indicating which of the character dis- 
plays is then being driven (this signal being directly 
derived from the output 230 of Random Sequence Gen- 
erator 202) and a corresponding signal at first Output 
Port 248 indicating which of the seven segments of that 
particular character display are then to be illuminated 
(this latter output being derived in a conventional man- 
ner from the binary output of Modulo 10 Counter 200). 
Conversely, when Data Enable signal C goes low, all 
outputs from Display Driver circuit 204 are disabled 



the embodiment shown in FIG. 5 by providing an addi- 20 and the individual character displays go blank. 



tional data gate between the Modulo 10 Counter and 
data bus 226, and by modifying the various control 
signals associated with the respective data gates such 
that when a Strobe signal is present on Strobe line 262 
from Keyboard Contacts Decoder 210, then the address 25 
supplied on Address input 232 of first RAM 206 is the 
output from Decoder circuit 210 and the I/O port 228 
of first RAM 206 is connected with the I/O port of 
second RAM 208, but when no such Strobe signal is 
present on Strobe light 262, then the address supplied to 30 
first RAM 206 is the row and column designation gener- 
ated by Random Sequence Generator circuit 202 and 
the data thereupon output by the first RAM is applied 
to the INi input of the Display Driver circuit 204. Since 
the data stored in first RAM 206 remains invariant after 35 
the Initialize phase is terminated, it is clear that such an 
alternative embodiment will eliminate all such synchro- 
nization problems and will guarantee that the character 
displayed as being associated with a particular key will 
of necessity be the character stored in second RAM 208 40 
when that key is depressed. 

In any event, what is required is a means for automat- 
ically apparently randomly assigning scrambled charac- 
ters to respective individual keys and storing or retain- 
ing the particulars so that keyboard data inputs may 45 
subsequently be unscrambled. 

As noted above, after the START button has been 
released, synchronization is maintained between the 
Modulo 10 Counter 200 and the Random Sequence 
Generator 202 by means of Clock pulses signal CLK 
236 from a common clock and perhaps by a Count 
Disable signal CE (see FIG. 6). 

Thus it will be seen that during the more or less fixed 
time intervals that the Initialization signal B is output by 
one-shot circuit 214, ten binary numbers corresponding 
to decimal digits 1 through 10 have been loaded into 
addresses in first RAM 206 corresponding to the loca- 
tion of the ten data keys of data input terminal 10 in 
accordance with a randomly generated sequence. 

Once Initialization signal pulse B has again gone low, 60 
Flip-flop 216 is set by the inverted Initialization signal B 
and accordingly its Q output goes high; assuming that 
comparator circuit 218 also has a high output at NO 
terminal 240, then the Data Enable signal "C" output 
from AND-gate 220 will go high. 65 

At this point it should be remarked that Data Enable 
signal C will be high only if Start signal A and Initializa- 
tion signal B are low; otherwise the Q output of Flip- 



50 



55 



Data Enable signal C also controls the flow of data 
from Output Port 250 of Keyboard Contacts Decoder 
circuit 210 by means of third data gate 252. Data Enable 
signal C is also applied to fourth data gate 254 located 
between I/O port 228 of first RAM 206 and I/O port 
256 of second RAM 208, Additionally, Data Enable 
signal C is applied to the Write Enable terminal 258 of 
second RAM 208 and AND-gate 270 located between 
Strobe output 262 of Contacts Decoder circuit 210 and 
the input 264 of Data Counter circuit 212. Finally, Data 
Enable signal C is applied to fifth data gate 265 control- 
ling the flow of data from Data Counter 212 to Address 
port 266 of second RAM 208. 

At this point, it may be noted that Keyboard Contact 
Decoder circuit 210 is conventional in nature and may, 
for instance, comprise a conventional multiplex scanner 
circuit which sequentially applies a signal to the four 
rows 266 of the matrix formed by the ten contacts of the 
keyboard portion of data terminal 10, at the same time 
testing for the presence of said signal on one of the three 
columns 268 of said matrix, thereby detecting a row in 
electrical contact with one of the three columns 268 in 
said matrix array. When such a contact is detected and 
a predetermined period of time has elapsed (so that any 
"bounce" characteristic of the individual electric 
contacts has effectively been eliminated) a "Strobe" 
pulse is generated at Strobe output 262 and a meaningful 
four bit digital word is present at Output port 250, the 
first two bits of which signifying a particular row, and 
the second two bits signifying a particular column. 

Furthermore, Data Counter circuit 212 in response to 
the Strobe signals output by the Contact Decoder cir- 
cuit 210 increments a count address used to control the 
operation of second RAM 208, which (since its Write 
Enable input 258 has already been enabled by Data 
Enable signal C) accordingly advances the address to 
which data from first RAM 206 is routed, leaving the 
current output of first RAM 206 permanently written 
into the proceeding address. 

■ Since first RAM 206 has previously been loaded dur- 
ing the Initialization sequence with data representing 
the characters displayed in association with the particu- 
lar keys of the keyboard; accordingly, as each key is 
successively depressed, a signal designating the particu- 
lar key is output by Contact Decoder circuit 210 to 
address first RAM 206, and RAM 206 thereupon out- 
puts the representation of the character then associated 
with that particular key as an input to second RAM 208 
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and (shortly thereafter), a Strobe pulse is generated by employed, the One-shot circuit should delay its output 
Contact Decoder 210 which advances the count main- relative to the Strobe pulse present Keyboard Contacts 
tained by Data Counter circuit 212, and the correspond- Decoder Strobe output 262, otherwise Flip-flop 216 
ing address input to second RAM 208 is incremented. would be prematurely reset and the just input data char- 
thereby leaving the decoded data input by the user 5 acter would not necessarily be loaded into second RAM 
permanently written into said second RAM, with each no. 208. 

successive address in the RAM corresponding to a sue- Referring now specifically to FIG. 6 which, as has 
cessive entry of a particular digit or character from the been noted previously, depicts an exemplary embodi- 
keyboard. ment of a Random Sequence Generator circuit usable in 

It will be noted that the output Count 270 from Data 10 the arrangement illustrated in FIG. 1 to generatie 80 
Counter circuit 212 is also input to Comparitor circuit different random sequences of the ten data input keys of 
218 where it is compared with binary "1000" (corre- keyboard 10, it may be seen that the output of the Se- 
sponding to decimal **8")- Since, at least for the pres- quence Generator is generated by a ModuIo-4 Counter 
ently preferred embodiment illustrated in the Figure, it 300 whose output lines 302 and 304 together designate a 
is intended that data sequences input by the user will 15 particular one of the four rows of the keyboard, and by 
always comprise exactly eight digits or characters, and a ModuIo-3 Counter 306 whose output lines 308 and 310 
since Data Counter 212 is reset to binary **0" by Clear designate a particular one of the four rows of the key- 
signal CLR prior to the data entry logic being enabled, board, and by a Modulo-3 Counter 306 whose output 
eight digits input by means of keyboard 10 will result in lines 308 and 3l0 designate a particular one of the three 
eight Strobe pulses being output on Strobe line 262, 20 columns C'OO", "01", or "10"). 
eight words of corresponding data being written into Also visible in FIG. 6 is Modulo 10 Counter 200 
eight successive locations in second RAM 208, and which it will be noted is provided with a Count Disable 
Counter 212 being advanced to the binary equivalent of (CE) signal input 312 (mentioned previously in connec- 
the number "8", whereupon the output from Compari- tion with FIG. 5 but not shown therein). Count Disable 
tor 218 will go low forcing the Data Enable output C 25 signal 312 is generated by AND-gate 314 and b high 
from AND-gate 220 also to go low, thereby inhibiting when (a) both output lines (302 and 304) of Modulo 4 
further entry of data from keyboard 10 into second Counter 300 are high (i.e. the row being designated is 
RAM 208 and additionally inhibiting the output of Dis- Row no. 4) and (b) the output from OR-gate 316 is also 
play Driver circuit 204, thereby effectively blanking out high indicating that at least one of the two output lin^ 
the character displays physically associated with the 30 308 and 310 of Modulo 3 Counter 306 is high (thus the 
individual data entry keys. designated column is not Column No. 1 but rather Col- 

Although the embodiment described in detail above umn No. 2 or Column No. 3). At this point it may be 
(and shown in the Figure in solid lines) employs a Clear noted that Modulo 4 (Row) Counter 300 is provided 
signal CLR and Scramble signal A, both generated in with an Up-Down input 318 generated by a first Flip- 
response to a single manual operation of START button 35 flop 320 and Modulo 3 (Column) Counter 306 is also 
32, it would clearly be possible to replace START but- provided with a similar Up-Down input 322 provided 
ton 32 with two separate buttons, one of which being a by a second Flip-flop 324, Thus, the setting of first 
RESCRAMBLE button having the capability of gener- Flip-flop 320 determines whether the Modulo 4 
ating a Scramble signal A but not a Clear signal CLR. Counter counts the rows in the Up direction or the 

By activating such a RESCRAMBLE button, the 40 Down direction (i.e. from top to bottom or from bottom 
user then would be able to cause Random Sequence to top of the keyboard) and second Flip-flop 324 deter- 
Generator 202 to generate a new and different sequence mines whether Modulo 3 Counter 306 counts the Col- 
of keyboard locations (which would be stored in the umns Forwards or Backwards (i.e. from left to right or 
first RAM 206 and which would also be used to activate from right to left of the keyboard). It will also be noted 
the character displays of display/keyboard unit 10) 45 that the Random Sequence Generator circuit of FIG. 6 
without resetting Data Counter 212. Accordingly, upon is provided with a third Flip-flop 236 which enables one 
depressing such a RESCRAMBLE button, the user or the other of AND-gates 328 and 330, whose outputs 
would be confronted with a different scrambled associa- are OR-ed by OR-gate 332 to provide the input 334 to 
tion of characters with keys, but could nevertheless Modulo 4 Row Counter 300. Assuming that the Q out- 
continue to input a continuing sequence of data since 50 put of third Flip-flop 326 is high (thus enabling the first 
Data Counter 212 which determines whether succes- of the two AND-gates designated by the reference 
sive data words are loaded mto new addresses in Sjscond numeral 328) then each time the first output line 308 of 
RAM 208 or are written over data contained in the Modulo-3 Counter 306 goes high (that is to say the 
earlier addresses has not been reset. Column Counter is designating the third column) then 

Also visible in FIG. 5 and shown in dotted lines 55 the Row Counter 300 is incremented to the next Row. 
(thereby indicating its alternative nature) is a One-shot Alternatively, if third Rip-flop 32<i is in its alternative 
circuit 280 having as its input the output of AND-gate state, such that output Q is high, and the second of the 
260, which as discussed previously when enabled by two AND-gates associated with the input to the Row 
Data Input signal C apphes the Strobe output 262 of Counter is enabled (namely the AND-gate designated 
Keyboard Contacts Decoder 210 to the input 264 of 60 by the reference numeral 330), then when the Column 
Data Counter 212, thereby signifying that another data Counter 306 is designating the second column, the row 
character has just been manually input by the user. By counter will be incremented. 

selecting the characteristics of One-shot circuit 280 As can be seen from FIG. 6, first Flip-flop 320 second 
such that its output is of a period much greater than the Flip-flop 324 and tlurd Flip-flop 326 are connected 
period between successive clock pulses CLK, the out- 65 together serially in a divider type of arrangement with 
put will be, for all practical purposes, a signal of dura- the output of the fu-st Flip-flop serving as the input to 
tion sufficientiy random that it may serve as an altema- the third, the output of the third serving as thie input to 
tive Scramble signal A without further processing. If the second. Since Modulo- 10 Counter 200 is provided 
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with a Terminal Count output TC, each time the count not be provided with inputs controlling whether they 
of nine has been iattained, then the TC signal may be count* upwards or downwards, 
conveniently used as the input to first Flip-flop 320. The control input of first FHp-flop 426 is provided by 
Such an arrangement will have the effect of guarantee- the output from an AND-gate 450, the inputs of which 
ing that Modulo- 10 Counter 200, first Flip-flop 320, 5 are Scramble signal A, the first digit (Do) output of a 
second Flip-flop 324 and third Flip-flop 326 were cy- second Modulo- 10 Counter 452 and the second digit 
cled through all eighty (10x2x2X2) possible combi- output (Di) of said second Modulo-10 Counter. The 
nations of conditions in a regular sequence, so that prob- control input to second Flip-flop 424 is provided by a 
ability of any one of the eighty possible combinations second AND-gate 454, inputs of which are the Scram- 
being the condition of the circuit at the time that the 10 ble signal A and the third digit (D2) of second Modulo- 
START signal A is terminated (i.e. the user has just 10 Counter 452. 

released his finger from the START button) will be the Although the Random Sequence Generator circuit of 
same, and accordingly the distribution of the eighty FIG. 6a in fact generates only 40 different sequences 
different combinations will be quite uniform, especially associating the digits 0 through 9 with the ten keys of 
if AND-gate 314 is disabled during the scrambling oper- 15 the Data Entry Keyboard 10, it does so in a manner 
ation. which I have found to be quite erratic and unpredict- 

Thus, by virtue of the particular settings of first Flip- able and therefore, for most intents and purposes, "ran- 
flop 320, second Rip-flop 326 and third Flip-flop 324, dom." 

the location on the keyboard output by the Random One embodiment of the invention has been described 
Sequence Generator circuit will proceed from top to 20 in connection with FIGS. 1 through 6 of the drawings, 
bottom or bottom to top, from right to left or left to These drawings and the foregoing detailed description 
right, and will be jump from one row to the next from were included in the prior patent application, Ser. No. 
the middle column or from the end column, thus the 146,404. In the following portion of the Detailed De- 
circuit is designated such that the Modulo 3 and Mod- scriptibh, FIGS. 7 through 10 will be described. These 
ulo 4 counters are not in regular synchronization with 25 figures include now preferred secure display and input 
Modulo-10 Counter 200 (because of the randomizing switch arrangements, and an overall system configura- 
effects of the gates and Up-Down settings controlled by tiori. 

the three Flip-flops) then for any particular starting Referring now to FIG. 7 of the drawings, it is an 
position within the eight basic cyclic sequences^ output exploded view showing the key components of a key- 
by Random Sequence Generator circuit, any one of the 30 board display and input unit which is generally compa- 
ten digits output by the Modulo- ID Counter 200 may be rable to that shown in FIGS. 1 through 3 of the draw- 
associated with any of the ten locations (If a synchro- ings. More specifically, the assembly of FIG. 7 includes 
nous condition were ever detected between the row arid a cover plate 502, a plurality of transparent or slightly 
column counters on the one hand, and the digit counter tinted key caps 504 for engagement by the finger or 
on the other hand, its effects could be eliminated by 35 fingers of the user, a transparent Mylar switching as- 
resetting either one or the other at the end of the scram- sembly 506 having a series of transparent switching 
bling operation). Thus it may be seen that with the areas 508, which may include conductive material such 
exemplary circuit illustrated, 80 different combinations as tin oxide which may be spaced apart and which may 
of character sequences associated with the particular come into engagement with one another as the keys 504 
keys of the keyboard may be generated in an unpredict- 40 are depressed. Alternatively, capacitive type switching 
able and apparently random manner. arrangements may be employed. An optical grid 510, 

Although eighty different sequences is more than which will be described in greater detail below, is lo- 
sufRcient to give the appearance of a random generation cated between the switching assembly 506, and the 
of sequences, by further modifications to the illustrated light-emitting displays 512, 514 and 516. The light-emit- 
cjrcuit additional different sequences could be gerier- 45 ting displays may be mounted above a pair of printed 
ated, up to the theoretical maximum of ten factorial circuit boards 518 and 520 which include the energiza- 
(101=3,628,800). tion and control electronics for the system. 

Another example of a Random Sequence Generator The restricted viewing system as disclosed in FIG. 7 
circuit is illustrated in FIG. 6a, relies on the optical grid elements 510, one of which is 

Referring specifically to that Figure and also to the 50 shown in a side view in FIG. 8. Viewed from the side, 
preceeding description of FIG. 6, it may be seen that the individual elements making up the optical grid in- 
first Flip-flop 426 is functionally similar to third Flip- elude a transparent plate 522 which may be in the order 
flop 326 of FIG. 6 in that it controls which of two of one-half to three-quarters of an inch in height, ap- 
AND-gates (AND-gate 328 or AND-gate 330) is en- proximately three hundredths of an inch in thickness, 
abled and accordingly whether the Sequence Generator 55 and which is provided with a very thin opaque layer 
jumps from one row to the next at the end column or at 524 which may be in the order of one to several thou- 
the middle column? -The second Flip-flop 424 deter- sandths of an inch in thickness. The member 522 may be 
mines whether the' signal applied to Up-Down input formed of a high quality transparent plastic material or 
provided on a Modulb-10 Counter 400 is set to its "Up'* of glasSj by way of example. The layer 524 may be a 
position or "Down" position, in much the same way as 60 very thin metallic foil, an opaque layer of paint, or other 
second Flip-flop 324 of FIG. 6 determined ^yhether the suitable opaque layers. 

Up-Down input 322 to M6dulo-3 Counter 306 was set The plates in the assembly 510 will extend vertically, 
to its Up or its Down position. It may be noted that when they are mounted for operation by a user. When 
although Modulo 4 (Row) Counter 400 is similar to a person is standing in front of the unit, close enough to 
Modulo 4 Counter 300 of FIG; 6 and the: Modulo 3 65 operate the push buttons, and close enough to view the 
(column) Counter 406 is similar to . the Modulo 3 . light-emitting diode display, the viewing angle is such 
Counter 306 of FIG. 6, that the Row and Column that the body and the head of the viewer will prevent 
Counters employed in the embodiment of FIG. 6d need others from observing the display. More specifically, 
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the light-emitting diode display cannot be viewed from 
an angle more than about 10 degrees from the side, 
when the optical grid is in place. In addition, a photo 
cell 526 to be mounted in the opening 528 in the cover 
plate 502, is employed to reduce the intensity of the 3 
light*emitting diode displays 512, 514 and 516 when the 
ambient illumination is low, to avoid a "light pipe** 
efTect of the optical grid 510 which has been found to 
occur under very low light level conditions. 

Also mounted on the cover plate 502 is the start 
switch 530 and the system state indicating lights 532 and 
534, which may be light-emitting diodes of different 
colors, where appropriate. Thus, for example, in some 
alarm systems, the system may be provided with green 
and red lights at the entry points, to indicate whether 
the system is "armed** or not, and the other indicator 
light may be employed to indicate whether the system is 
in condition to be armed. 

The system of FIG. 9 is very similar to that of FIG. 
7, with the exception that the key caps 504-1 and the 
Mylar switching assembly 506-1 and 506-2 are not over- 
lying the optical grid 510-1. More specifically, in FIG^ 
9, the light-einitting diode displays 536 and 538 are 
located centrally in the asseinbly, and they are , only • 
aligned with the optical grid 510-1 and a window 540 
which is preferably made of a high strength transparent 
plastic such as polycarbonate, which may also be used 
for the transparent material in the optical grid 510 and 
510-1. The arrangement of FIG. 9, has the advantages 
that the optical grid may of reduced extent, and that the 
switches and key caps need not be transparent. They are 
merely mounted adjacent the LED displays with which 
they are associated, but do not overly them. On the 
other hand, with the light-emitting diodes directly 35 
under the switches 504, in the arrangement of FIG. 7, 
the association of the switches with the key pad is more 
direct. 

It b to be understood, of course, that suitable and 
conventional housing and mounting arrangements will ^ 
be provided for the assemblies of FIGS. 7 and 9, in 
which only the critical active elements have been 
shown. 

Referring now to FIG. 10, an overall system which 
may utilize the devices and circuitry shown in FIGS. 1 45 
through 9 hereof, is disclosed. More specifically, in 
FIG. 10, a set of seven segment displays is shown at 552, 
and the corresponding input switches are shown at 554. 
The display driver circuitry 556 and the digital data 
processing circuity 558 are shown associated with the 50 
display 552 and the input switches 554. This digital data 
processing circuitry 558 includes random access mem- 
ory capability, as indicated by the block 560. The unit 
558 may be eitfier a special logic circuitry including the 
circuits as shown in FIGS. 5, 6 and 6a, for example, or 55 
it may be implemented by a microprocessor of any of a 
number of available types. The data processing cir- 
cuitry may further be coupled to a host system 562, 
which may, for example, be coupled to a number of 
additional local stations, as generally indicated by the 60 
dashed line block 564. In addition to the keyboard and 
input switches and the digital data processing circuitry 
558, the station 564 may include equipment 566 which 
may, for example, be (1) an electromagnetically opened 
door latch, (2) a siren or other warning device, or (3) a 65 
device for performing some other functions such as the 
dispensing of an object or of cash, when the proper 
input signals have been given. 



The keyboard assembly, as shown in FIGS. 7 and 9, 
for example, is included within the left-hand dashed line 
block 564 as shown in FIG. 10. Thus, the electronics 
indicated by blocks 556 and j558, for example, may be 
included on the printed circuit boards 518 and 520 of 
FIGS. 7 and 9. , 

Concerning one other aspect of the present invention, 
in some cases, separate scrambling and unscrambling 
circuitry may not be needed for identifying thpi;digit (1 
through 10, for example), which has been selected by 
the user, in depressing the input keys. Thus, by way of 
a specific! crude example, let us suppose that each of the 
numbers 0 through 9 are represented by discreet inpUt 
voltages having different levels, for example, starting 
with one volt representing 0 and continuing until the 
level of 10 volts represent the digit 9. Then, let us as- 
sume further that, as the s\yitches are depressed, this 
voltage level is transmitted to an output circuit, to rep- 
resent the selected digit. With this type of arrangement, 
special unscranibling circuitry which identifies the par- 
ticular LED' to which a particular number has been 
randomly-assigned, will not be necessary. It is also 
noted that two of the keys in the displays of FIGS. 7, 
and 9. may be permanently allocated to tl^e pound (#) 
and the asterisk (*) symbols, with no associated nume- 
ric/alphanumeric display for those keys. These keys are 
commonly used for a variety of special purpose func- 
tions by the host system, such as an instant panic signal 
for an alarm or entry system. 

In conclusion, it is to be understood that the present 
invention is not limited to that precisely as shown and 
described hereinabove. More specifically, the system 
may be implemented either by a detailed special logic 
circuit or by microprocessor control electronic cir- 
cuitry; various physical arrangements of the input 
switches may be employed, and other equivalent me- 
chanical arrangements and electrical circuit configura- 
tions may be employed to accomplish the same func- 
tions as disclosed hereinabove. Accordingly, the pres- 
ent invention is not limited to that precisely as set forth 
hereinabove. 

What is claimed is: 

1. A secure keyboard input system comprising: 

a deyboard having a plurality of individual keys and 
corresponding character displays; 

means for generating apparently random pairings 
between the individual keys and individual charac- 
ters included in a set of characters, and means for 
displaying the individual characters in correspon- 
dence with the respective paired keys; 

means for translatmg the actuation of particular key- 
board keys into signals representing the corre- 
spondmg^characters pairedJosaid_ke>^; 

means^for restricting the vie^j9|~g^c^ 
playk^tom otfigf^han tMmSiviSimroperating the 
'keybpardr said vie w restricting'^eans includingi 
[opticd^rid ni^s ineluding^**plurality^ 
spaced^transparent plates havingrnon-transpa^nt 
megw betw^n^cjt jplat^ said dispftty- 

ing:mea&,-f6rjestri^:tiri^ angle of view topless 
rthan ten degreeTfrom^perpendicuiarity to thVkey- 
bo^;'and" ' " 

means for selectively initiating a new set of appar- 
ently random pairings between said keys and said 
characters. 

' 2. A secure keyboard input system as defined in claim 
1 further comprising photosensitive means for reducing 
the energization of the displaying means under low light 
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level conditions, to preclude fiber optic surface effect 
viewing of the displayed characters. 

3. A secure keyboard input system as defined in claim 

1 further comprising: ^ 
an actuation device; and 

means for processing said signals and for energizing 
said actuation device upon validation of said sig- 
nals. 

4. A secure keyboard input system as defmed in claim 
1 wherein said keys are transparent and overlie said 
optical grid means. 

5. A secure keyboard input system as defmed in claim 
i wherein said keys are mounted respectively immedi- 
ately beside the associated displaying means for each of 
the respective characters. 

6. A secure keyboard input system as defmed in claim 
1 wherein said translating means includes unscrambling 
means responsive to said random pairings for producing 
binary output signals corresponding to the individual 
displayed characters, notwithstanding changes in the 
apparently random pairings. 25 
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7. A secure keyboard input system as defmed in claim 
3 including microprocessor means for sampling the 
keyboard and for controlling said actuation device. 

8. A secure keyboard system as defmed in claim 1 
wherein said non-transparent means is a layer of opaque 
material in the order of one to several thousandths of an 
inch in thickness. 

9. A secure keyboard input system comprising: 
means for displaying a plurality of characters in a 

variable display; 

means for restricting view of said variable display to 
less than ten degrees from perpendicularity to said 
display, said view restricting means including an 
optical grid made up of a plurality of thin transpar- 
ent plates having means for blocking visibility be- 
tween each pair of adjacent plates; and 

a keyboard having movable transparent keying means 
associated respectively with and overlying individ- 
ual means for displaying characters in said variable 
display. 

10. A secure keyboard input system as defined in 
claim 9 wherein transparent electrical switching means 
are located between said keying means and said optical 
grid for actuation by said keying means. 
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